ports/149411: writing to the net/samba* share on any sysutils/fusefs-* resource leads to kernel panic

[Sergey]

>Number:         149411
>Category:       ports
>Synopsis:       writing to the net/samba* share on any sysutils/fusefs-* resource leads to kernel panic
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Aug 08 06:50:04 UTC 2010
>Closed-Date:
>Last-Modified:
>Originator:     Sergey
>Release:        8.0-8.1
>Organization:
ARB Consulting
>Environment:
FreeBSD office.a-r-b.ru 8.0-STABLE FreeBSD 8.0-STABLE #0: Thu Mar 18 00:18:04 YEKT 2010     root at arb:/data/obj/usr/src/sys/arb  i386
reproduced on amd64 aswell
>Description:
I'm getting kernel panics everytime I try to write a file to samba share which is a fuse mount.
I tried samba 3.0.37, 3.3.13, 3.4.8

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x0
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0x0
stack pointer           = 0x28:0xe67bbc44
frame pointer           = 0x28:0xe67bbc68
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 1237 (smbd)
trap number             = 12
panic: page fault
cpuid = 1
Uptime: 14m23s
Physical memory: 1011 MB
Dumping 73 MB: 58panic: bufwrite: buffer is not busy???
cpuid = 1
 42 26 10

Reading symbols from /usr/local/modules/fuse.ko...done.
Loaded symbols for /usr/local/modules/fuse.ko
#0  doadump () at pcpu.h:246
246     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) #0  doadump () at pcpu.h:246
#1  0xc08a1d47 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:416
#2  0xc08a1fa9 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:590
#3  0xc0bd72bc in trap_fatal (frame=0xe67bbc04, eva=0)
    at /usr/src/sys/i386/i386/trap.c:938
#4  0xc0bd7540 in trap_pfault (frame=0xe67bbc04, usermode=0, eva=0)
    at /usr/src/sys/i386/i386/trap.c:851
#5  0xc0bd7e85 in trap (frame=0xe67bbc04) at /usr/src/sys/i386/i386/trap.c:533
#6  0xc0bb9e7c in calltrap () at /usr/src/sys/i386/i386/exception.s:166
#7  0x00000000 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb) 
>How-To-Repeat:
1. Install /usr/ports/net/samba34, /usr/ports/sysutils/fusefs-unionfs
2. Add to default samba config:
security = user
[test]
path = /test
public = yes
writeable = yes

3. unionfs -o allow_other /tmp /test
4. smbclient //IP/test
put <some file>

There we get a panic
>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: